GlossaryAgentsIntermediate

Botnet

Also written: Bot net

A network of compromised computers controlled remotely to perform malicious tasks.

In plain terms

A botnet is a collection of internet-connected devices that have been secretly infected with malicious software. This software allows a hacker, or "botmaster," to control these devices remotely, often without the owners even knowing.

These infected devices, called "bots" or "zombies," can then be commanded to work together to carry out harmful activities. Examples include sending spam emails, launching denial-of-service attacks to overload websites, or stealing personal information.

The expert version

A botnet is a distributed network of compromised computing devices, typically infected with malware, that are controlled remotely by an attacker. These devices can range from personal computers and servers to IoT devices. Botnets are commonly used to conduct large-scale, coordinated cyberattacks such as distributed denial-of-service (DDoS) attacks, credential stuffing, spam distribution, and cryptocurrency mining.

The effectiveness of a botnet lies in its scale and distributed nature, making it difficult to trace and shut down. Command and control (C2) infrastructure is used to manage the botnet, with various architectures like centralized, decentralized, or peer-to-peer models employed.

Why it matters now

Recent discussions highlight the potential for AI models to be used in or become part of botnets. This is because advanced AI could be used to control large numbers of compromised devices for malicious purposes, or potentially even self-replicate across networks like malware.

Where it shows up 3 items, newest first
How each company uses it
Anthropic Claude
Anthropic's research touches on AI models potentially spreading like malware, a capability that could be leveraged by or contribute to botnet operations.
OpenAI ChatGPT
OpenAI's discussions on AI's cybersecurity risks suggest a concern that AI could be used to enhance or facilitate botnet attacks.
Related terms

MalwareDDoS AttackCybersecurityAI AgentRogue AIInternet of Things

Often confused with
Malware
Malware is the malicious software itself, while a botnet is the network
Honeypot
A honeypot is a decoy system set up to attract and trap attackers, whe
Origin

The term "botnet" emerged in the early 2000s as security researchers began to identify and describe networks of compromised computers being used for malicious activities. The concept evolved from earlier forms of network worms and bot programs.

Try this about 5 minutes

While you cannot directly interact with a botnet, you can learn about their impact by researching recent large-scale DDoS attacks. Look up news reports on major cyber incidents and read about the methods used to disrupt services, which often involve botnets.

Try it: Playbook entries that use thisPlaybook →

The Playbook: reusable how-tos, prompts, configs and tips pulled out of the news.

Questions people ask

How do devices become part of a botnet?
Devices typically become part of a botnet when they are infected with malware, often through phishing emails, malicious websites, or exploiting software vulnerabilities.
Are botnets illegal?
Yes, creating, controlling, or using a botnet for malicious purposes is illegal in most jurisdictions worldwide.

First seen on Subvolts Sep 12, 2026. Updated Oct 12, 2026. Written by an AI model from the items above and reviewed against them weekly; report an error.